This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft File: rVwudMbUbMc8mKTBYIeoo7Om91k.mft (raw, json) Hash identifier: 1yqY89Wk227ne/kN6wxxPqZAw4ECUPhRALFjy5qxcn8= Subject key identifier: 9E:01:4D:FD:BF:30:F9:90:A3:79:A4:C0:31:95:10:5F:2B:A7:B3:81 Authority key identifier: AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 Certificate issuer: /CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Certificate serial: 019B3A8FBB8D3F82E376DF70954B67982C5D Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft Manifest number: 1798 Signing time: Sat 20 Dec 2025 07:00:56 +0000 Manifest this update: Sat 20 Dec 2025 07:00:56 +0000 Manifest next update: Sun 21 Dec 2025 07:00:56 +0000 Files and hashes: 1: 1wHz9itaaIOutvJbiLzjoh-KZtU.roa (hash: a0TL9iwZU0oRfdDEOO3AGkbTz5l5jRDjC2JWXY9aScI=) 2: 8O6pLoVX5MOhxRX0NAMWUCXkJ60.roa (hash: OO8XZDvw+dAnLvMz7bhHaxqvBWh2QRq24DPVyPxT+c4=) 3: HiQ6Lt40sq-xIz6tkUoUbBZPPes.roa (hash: ui+vLJdGvwi3l4EpB62KxNBd0L/KlnLaav/bQM8mWTA=) 4: KlqCgVt6MuLnVmP2np_5gob4_Bo.roa (hash: zkiiaVBv7w1FhyPvWpSRNAx73GQrEuAiaBTQXdEgjoI=) 5: NTKDdALBTRm2WTEgZsxcregayPI.roa (hash: sWYCO5qPeurAAE3MfSHRTq8EaqmEYvvJmtWBKYriueU=) 6: epQyZ0cEDixetECLXvdOgne06Nk.roa (hash: 1dyLGgbxJMKJwagRLwzFgVXDhdkxgKcN07zL1ygYTf0=) 7: rVwudMbUbMc8mKTBYIeoo7Om91k.crl (hash: MkS2uRyIOM/5Pjmm1F9UvVmQC8Cf2tyJEPV7dSKvfsw=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 21 Dec 2025 07:00:56 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:3a:8f:bb:8d:3f:82:e3:76:df:70:95:4b:67:98:2c:5d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=ad5c2e74c6d46cc73c98a4c16087a8a3b3a6f759 Validity Not Before: Dec 20 07:00:56 2025 GMT Not After : Dec 21 07:00:56 2025 GMT Subject: CN=9e014dfdbf30f990a379a4c03195105f2ba7b381 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:7a:b6:68:66:d0:e1:1b:7b:4c:0c:5e:fe:74: 78:a5:a4:6f:95:f4:0e:02:58:b7:a4:e6:5f:f8:a7: c8:28:d9:5a:f6:fd:17:20:5c:47:3a:ee:6b:50:fe: 97:18:eb:d0:e3:81:5f:8d:08:00:58:6d:98:be:d3: 3e:05:b9:af:58:7e:e1:b0:57:c2:91:cd:e5:17:64: f6:59:7a:72:ce:c2:9f:e5:9e:90:bd:a0:d5:55:bc: 3a:8e:3d:95:c3:0c:61:fc:26:ec:e3:8b:3e:bf:9e: 11:dc:56:fd:e3:11:9f:5c:51:65:76:40:a6:25:ec: 5a:ca:eb:65:c5:18:cc:80:84:06:32:22:45:12:43: 8e:e4:d5:c0:47:12:53:8c:f2:87:3d:eb:2b:81:39: 60:6b:4a:9e:fb:a6:5d:96:ac:60:48:c1:d1:7e:1f: 7a:2f:5e:d4:a4:3f:54:ae:d1:eb:a5:bd:08:bd:ad: 64:01:b9:8d:90:a9:a0:cf:d6:33:54:74:9a:7e:90: 84:69:a9:c8:28:48:9c:e2:2b:1e:0c:db:80:0c:b5: 05:50:df:41:73:fc:6c:7d:6f:b0:d3:59:53:90:69: 1a:af:0a:c9:67:14:20:42:80:a3:1b:82:3b:55:bc: d8:2e:33:53:db:a3:1f:04:0b:35:7d:66:65:5b:1e: 82:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 9E:01:4D:FD:BF:30:F9:90:A3:79:A4:C0:31:95:10:5F:2B:A7:B3:81 X509v3 Authority Key Identifier: keyid:AD:5C:2E:74:C6:D4:6C:C7:3C:98:A4:C1:60:87:A8:A3:B3:A6:F7:59 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rVwudMbUbMc8mKTBYIeoo7Om91k.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/14/5da375-99a9-4329-9d29-cec8931ce631/1/rVwudMbUbMc8mKTBYIeoo7Om91k.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 7f:9c:86:f1:9c:06:c4:71:75:db:a6:1c:da:12:40:4c:2b:63: 74:45:60:18:c6:0b:10:51:77:ba:fc:b0:c9:09:3d:ba:0a:32: a0:60:6a:dc:a5:3b:5c:69:05:35:67:ab:28:96:09:c6:65:40: a6:c8:e5:56:60:5c:06:7d:68:ed:c8:4b:38:5a:6c:97:73:7c: b1:b5:2e:8a:cd:2a:40:cc:86:72:70:d1:71:4a:8d:cb:d0:b0: fb:20:5b:dd:ff:98:86:8c:4d:0c:92:5e:43:bd:b1:3e:d6:2a: db:5d:04:29:e6:50:eb:7e:28:00:24:04:2a:38:00:cc:b8:40: ff:ea:64:9f:ab:df:bf:0c:c4:fc:53:e0:8e:c4:ee:85:de:46: 73:04:66:b2:03:ed:58:97:0a:05:25:95:9b:62:d6:c0:25:2e: ba:57:54:27:37:9c:29:5b:6f:24:0f:a3:35:71:09:e9:59:c0: f3:43:c3:84:30:e9:d8:82:5b:eb:90:94:3f:f7:ff:5a:e3:9a: d9:56:11:e4:62:89:89:02:d5:3a:e8:15:9c:ce:e8:55:7a:84: 8a:51:71:d3:f5:02:57:32:f3:53:b4:3e:60:4b:bf:7c:77:15: 52:21:95:de:c3:dd:c7:a0:8b:fa:e4:b3:65:fd:dd:a9:46:2d: 78:0a:8c:ff -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZs6j7uNP4Ljdt9wlUtnmCxdMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGFkNWMyZTc0YzZkNDZjYzczYzk4YTRjMTYwODdhOGEzYjNh NmY3NTkwHhcNMjUxMjIwMDcwMDU2WhcNMjUxMjIxMDcwMDU2WjAzMTEwLwYDVQQD Eyg5ZTAxNGRmZGJmMzBmOTkwYTM3OWE0YzAzMTk1MTA1ZjJiYTdiMzgxMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHq2aGbQ4Rt7TAxe/nR4paRvlfQO Ali3pOZf+KfIKNla9v0XIFxHOu5rUP6XGOvQ44FfjQgAWG2YvtM+BbmvWH7hsFfC kc3lF2T2WXpyzsKf5Z6QvaDVVbw6jj2Vwwxh/Cbs44s+v54R3Fb94xGfXFFldkCm JexayutlxRjMgIQGMiJFEkOO5NXARxJTjPKHPesrgTlga0qe+6ZdlqxgSMHRfh96 L17UpD9UrtHrpb0Iva1kAbmNkKmgz9YzVHSafpCEaanIKEic4iseDNuADLUFUN9B c/xsfW+w01lTkGkarwrJZxQgQoCjG4I7VbzYLjNT26MfBAs1fWZlWx6ClwIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFJ4BTf2/MPmQo3mkwDGVEF8rp7OBMB8GA1UdIwQY MBaAFK1cLnTG1GzHPJikwWCHqKOzpvdZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjkt Y2VjODkzMWNlNjMxLzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNC81ZGEzNzUtOTlhOS00MzI5LTlkMjktY2VjODkzMWNlNjMx LzEvclZ3dWRNYlViTWM4bUtUQllJZW9vN09tOTFrLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf5yG8ZwG xHF126Yc2hJATCtjdEVgGMYLEFF3uvywyQk9ugoyoGBq3KU7XGkFNWerKJYJxmVA psjlVmBcBn1o7chLOFpsl3N8sbUuis0qQMyGcnDRcUqNy9Cw+yBb3f+YhoxNDJJe Q72xPtYq210EKeZQ634oACQEKjgAzLhA/+pkn6vfvwzE/FPgjsTuhd5GcwRmsgPt WJcKBSWVm2LWwCUuuldUJzecKVtvJA+jNXEJ6VnA80PDhDDp2IJb65CUP/f/WuOa 2VYR5GKJiQLVOugVnM7oVXqEilFx0/UCVzLzU7Q+YEu/fHcVUiGV3sPdx6CL+uSz Zf3dqUYteAqM/w== -----END CERTIFICATE-----Generated at Sat Dec 20 13:17:57 2025 by rpki-client